Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          uoTNlMgQ/EKgfiFr4NuZ0iL70iXxKZeW9v0dZ6FQQrc=
Subject key identifier:   63:C0:39:86:5E:61:5A:50:A5:C6:6E:37:FA:02:E0:FA:D3:68:B3:F6
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       0B46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          0B2B
Signing time:             Tue 22 Sep 2026 19:09:35 +0000
Manifest this update:     Tue 22 Sep 2026 19:09:35 +0000
Manifest next update:     Tue 29 Sep 2026 19:09:35 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: hz6uH/H1sIe9i+nrP1NwI3LRcO/8xwOqeozRmG4g7u0=)
                          2: 2BDF72FA8C1211F184A8D0114511F970.roa (hash: tTwJEbv0EWMSnW/LNwHMoGpK+yZ0oG8h7PMKW387DV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
                          rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2886 (0xb46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: Sep 22 19:09:35 2026 GMT
            Not After : Sep 29 19:09:35 2026 GMT
        Subject: CN=6ab2d26f-9677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:8b:fb:f0:52:b5:b5:ec:e7:a3:fb:74:d6:
                    43:17:59:d6:db:c6:f5:f9:f6:1a:3a:3c:1c:b9:c2:
                    2f:18:30:a5:33:98:a8:f1:c0:5f:c5:7a:65:34:4a:
                    82:b1:ac:e4:dd:9d:5d:05:3e:d9:d3:b1:1c:45:54:
                    50:ef:80:b7:29:df:09:2c:66:43:e2:6e:99:b9:cb:
                    90:85:0e:62:51:8e:e0:61:f9:ef:af:2e:ce:a7:fc:
                    1b:00:55:e0:bb:67:84:32:6b:36:5f:d0:27:14:67:
                    1a:a0:18:89:a6:09:ed:9a:0d:46:5a:7a:09:c8:1c:
                    82:55:21:6d:cb:c1:c9:54:ad:5d:b3:35:cc:a4:13:
                    50:05:bd:7d:52:28:55:57:03:de:57:6d:ce:a9:8b:
                    b3:fc:bb:e0:c5:e5:ac:d4:9e:bc:a5:c0:9b:62:65:
                    ae:24:98:20:00:5e:41:b9:60:4d:54:d6:c4:5f:5c:
                    c7:9d:97:8d:41:87:0c:34:f4:2b:ae:22:2d:8f:3a:
                    c6:5f:c8:a9:cf:86:22:c2:d1:51:f9:c6:91:11:f4:
                    a1:ef:42:e0:43:1f:f7:c8:26:7a:5f:d6:f3:36:76:
                    4e:68:3d:f7:21:5b:be:58:1a:18:96:10:cf:48:47:
                    7e:c5:b0:26:1f:5e:80:58:bd:fa:bd:5c:67:92:25:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:39:86:5E:61:5A:50:A5:C6:6E:37:FA:02:E0:FA:D3:68:B3:F6
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:9a:9f:0d:29:f3:11:7a:fb:0b:20:db:af:a5:25:e6:c2:
         15:59:51:4c:19:db:a1:94:f4:b1:18:56:49:8b:ea:b7:89:35:
         ed:40:fa:12:87:7e:29:7c:e7:08:67:19:f4:bc:e8:91:3c:6e:
         f0:eb:8b:38:88:8a:9d:9a:92:eb:13:c6:16:48:6d:f7:e4:97:
         fc:63:ea:ec:70:0f:2c:fe:a2:b1:33:ae:50:48:4a:5e:0c:88:
         24:d4:1d:a5:80:2e:ca:5a:43:0f:6c:70:6a:e3:d0:09:f7:9e:
         65:03:ed:87:8d:ae:53:08:91:6b:a9:b1:fe:91:0f:58:32:9f:
         ad:33:5e:22:83:63:ce:78:71:6a:d1:f2:f1:eb:2a:d4:ab:b1:
         20:41:93:5d:a1:f1:1f:9a:82:51:28:8f:80:4c:ec:53:1c:d1:
         6b:b4:3d:6b:bc:2b:19:3a:7a:90:c8:b5:6d:fa:7d:af:c4:97:
         3c:fe:38:fc:c4:99:d7:13:12:dc:17:44:c4:f8:40:2a:33:0a:
         5b:52:91:5e:22:b5:6e:27:88:b9:13:93:bd:8f:ca:e0:0f:de:
         73:42:fa:e4:14:03:fe:1e:0d:6f:8b:7d:7d:83:5f:e9:24:31:
         ae:69:e4:d5:33:76:21:81:64:d1:0b:6f:25:d1:81:f6:56:7b:
         37:a6:3d:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz
MjUxOTQ0QjIwHhcNMjYwOTIyMTkwOTM1WhcNMjYwOTI5MTkwOTM1WjAYMRYwFAYD
VQQDEw02YWIyZDI2Zi05Njc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKmL+/BStbXs56P7dNZDF1nW28b1+fYaOjwcucIvGDClM5io8cBfxXplNEqC
sazk3Z1dBT7Z07EcRVRQ74C3Kd8JLGZD4m6ZucuQhQ5iUY7gYfnvry7Op/wbAFXg
u2eEMms2X9AnFGcaoBiJpgntmg1GWnoJyByCVSFty8HJVK1dszXMpBNQBb19UihV
VwPeV23OqYuz/LvgxeWs1J68pcCbYmWuJJggAF5BuWBNVNbEX1zHnZeNQYcMNPQr
riItjzrGX8ipz4YiwtFR+caREfSh70LgQx/3yCZ6X9bzNnZOaD33IVu+WBoYlhDP
SEd+xbAmH16AWL36vVxnkiVbgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPAOYZe
YVpQpcZuN/oC4PrTaLP2MB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy
OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC
Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYcGanw0p8xF6+wsg26+lJebCFVlRTBnboZT0sRhWSYvqt4k17UD6Eod+KXzn
CGcZ9LzokTxu8OuLOIiKnZqS6xPGFkht9+SX/GPq7HAPLP6isTOuUEhKXgyIJNQd
pYAuylpDD2xwauPQCfeeZQPth42uUwiRa6mx/pEPWDKfrTNeIoNjznhxatHy8esq
1KuxIEGTXaHxH5qCUSiPgEzsUxzRa7Q9a7wrGTp6kMi1bfp9r8SXPP44/MSZ1xMS
3BdExPhAKjMKW1KRXiK1bieIuROTvY/K4A/ec0L65BQD/h4Nb4t9fYNf6SQxrmnk
1TN2IYFk0QtvJdGB9lZ7N6Y9tg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:12:04 2026 by rpki-client